[YMCS/YDMP Free Trial Program]Yealink would like to offer Free Trial Program of Yealink device management service for our current eligible customers. You can see the details below.
https://www.yealink.com/ydmp-freetrial-2020


Post Reply 
 
Thread Rating:
  • 0 Votes - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
openvpn w52p setup
Author Message
rafael Offline
Junior Member
**

Posts: 1
Joined: Dec 2015
Reputation: 0
Post: #1
openvpn w52p setup
Hello trying to setup openvpn on the phone.
please help me may be i forget something
model w52p
Firmware Version 25.73.0.40
Hardware Version 25.1.0.0.0.0.0
openvpn.tar
--keys
----ca.crt
----oneclient.crt
----oneclient.key
----oneclient.scr
----ta.key
--vpn.cnf
client
remote IP.IP.IP.IP 1194
port 1194
dev tun
proto udp
resolv-retry infinite
nobind
persist-key
persist-tun
tls-client
tls-auth /config/openvpn/keys/ta.key 1
ca /config/openvpn/keys/ca.crt
key /config/openvpn/keys/oneclient.key
cert /config/openvpn/keys/oneclient.crt
mute-replay-warnings
ns-cert-type server
comp-lzo
verb 3
mute 10
(This post was last modified: 12-10-2015 01:01 PM by rafael.)
12-09-2015 01:22 PM
Find all posts by this user    like0    dislike0 Quote this message in a reply
Yealink_Michael Offline
Administrator
*******

Posts: 382
Joined: Jul 2015
Reputation: 2
Post: #2
RE: openvpn w52p setup
hi

would you please try to modify /config/openvpn/keys/ta.key 1 to /config/openvpn/keys/ta.key and test again

then please check if the signature of the certificate is md5 or sha1?

W52P doesn't support SHA256, it should use SHA1 or MD5, please chaange it and then recreate the keys, you can change it in "openssl.cnf" file , change sentence :

"default_md = sha256"

change to :

"default_md = md5"

"openssl.cnf" file in windows: Open VPN --- easy-rsa --- the file begin with openssl, it may be openssl-1.1.1.cnf or some like this
"openssl.cnf" file in linux: easy-rsa or the subdirectories under it ,also begin with openssl

I have uploaded a sample Openvpn file(Openvpn_sample.tar) for your reference, please follow this format to create the .tar file.

Thank you!

Best Regards,
Michael


Attached File(s)
.tar  Openvpn_sample.tar (Size: 10.5 KB / Downloads: 83)
12-09-2015 05:17 PM
Find all posts by this user    like0    dislike0 Quote this message in a reply
mkeuter Offline
Asterisk Integrator
***

Posts: 82
Joined: Jul 2013
Reputation: 3
Post: #3
RE: openvpn w52p setup
@Yealink_Michael:

is that limitation to SHA1 and MD5 hardware related or is it possible to support SHA256 in future firmwares of the W52P?
Would that also affect SIP/TLS certificates?

Next year many internet services will switch to SHA256 and deprecate SHA1.

Michael

http://www.mksolutions.info
12-15-2015 05:51 AM
Visit this user's website Find all posts by this user    like0    dislike0 Quote this message in a reply
mkeuter Offline
Asterisk Integrator
***

Posts: 82
Joined: Jul 2013
Reputation: 3
Post: #4
RE: openvpn w52p setup
@Yealink_Michael:

Here is more information about the SHA-1 deprecation :
https://blog.cloudflare.com/sha-1-deprec...ft-behind/

Would auto-provisioning via https still work with SHA-256 certificates with the W52P?
Do other Yealink models (firmwares) also have this limitation to SHA1 and MD5?

Michael

http://www.mksolutions.info
12-16-2015 11:53 PM
Visit this user's website Find all posts by this user    like0    dislike0 Quote this message in a reply
indicato Offline
Junior Member
**

Posts: 1
Joined: May 2014
Reputation: 0
Post: #5
RE: openvpn w52p setup
Install the firmware for the w56p base station (compatible with the w52p base station) it is fixed there:
http://support.yealink.com/documentFront...mentId=110
(This post was last modified: 08-10-2017 02:05 PM by indicato.)
08-10-2017 02:03 PM
Find all posts by this user    like0    dislike0 Quote this message in a reply
Post Reply 


Possibly Related Threads...
Thread: Author Replies: Views: Last Post
  Yealink T28 setup audible ring on 2nd incoming call JeffWilkinson 20 86,309 10-18-2023 12:59 PM
Last Post: sles
  Passing only LDAP traffic through OPENVPN Commensus 0 1,982 02-23-2022 09:47 PM
Last Post: Commensus
  Configuring OPENVPN with Yealink Commensus 0 2,476 02-23-2022 09:45 PM
Last Post: Commensus
  DHCP not working on T26P when OpenVPN is enabled. LandonL 11 35,890 05-12-2021 10:46 AM
Last Post: 1sae
  Solved Openvpn.tar creating the right size file compsos 3 8,191 08-20-2020 06:49 AM
Last Post: complex1
  OpenVPN and QoS/TOS roelvanmeer 0 4,534 02-19-2019 09:27 AM
Last Post: roelvanmeer
  OpenVPN Timeout connecting p2xt 3 10,059 07-13-2018 07:37 PM
Last Post: jolouis
  trying to setup VPN on T29G/46.82 mikeymike20 3 9,535 11-09-2017 06:37 AM
Last Post: Lucia_Yealink
  can't setup openvpn with t48g zzz 8 24,096 07-18-2017 09:04 AM
Last Post: sj
  W52P over IPsec VPN Novais 6 15,993 02-15-2017 04:56 PM
Last Post: jolouis

Forum Jump:


User(s) browsing this thread: 1 Guest(s)

Contact Us   Yealink   Return to Top   Return to Content   Lite (Archive) Mode   RSS Syndication